How VBowls handles your information.

• Account and contact details such as name, verified email, phone number, and authentication identifiers.
• VScore answers, goals, preferences, food and activity logs, progress entries, and support communications.
• If you use vMind, mood and energy coordinates, selected tension areas and needs, tool sessions and helpfulness, private journal entries, an optional safety plan, and your independent consent choices.
• Only with separate permission, vMind may save aggregate typing-session summaries from its journal—such as duration, final character count, correction count, pause count, and summary intervals—or create neutral routine reflections from eligible VFit activity. It does not retain keys, characters, clipboard contents, raw typing timestamps, or event traces.
• With your explicit permission, daily health aggregates such as steps, sleep duration, exercise, heart-rate summaries, and weight. We do not import raw routes or arbitrary device samples.
• Order, subscription, refund, fulfillment, reward, and booking identifiers supplied by payment, commerce, and connected service providers.
• Technical information needed for security and operation, including device, browser, IP, session, and diagnostic events.

We use information to provide and secure accounts, calculate and explain VScore, personalize VFit, process orders and subscriptions, operate rewards and challenges, respond to support requests, prevent fraud, meet legal obligations, and improve service reliability.

Health and wellness information is used only for the features you request. It is not used to make medical diagnoses or displayed in public competition results. vMind never uses journal text to choose an intervention, calculate a routine reflection, trigger a coach share, or create an urgent-support prompt.

vMind routine analysis, typing summaries, generic reminders, and coach sharing each have a separate control and are off by default. Revoking one permission does not remove access to private check-ins, journals, or reviewed tools.

We share information needed for a provider's role: Supabase for identity and data storage; Vercel for hosting; Shopify for physical commerce; Stripe for eligible website payments; and Apple, Google and RevenueCat for eligible app purchases and subscription access. With optional permission, Sentry receives sanitized app error diagnostics. Resend delivers requested transactional emails; Expo delivers configured push notifications; Meta processes requested WhatsApp communications. Optional Google Analytics and Meta analytics follow the separate tracking choices below. Communications and calendar providers process the information needed to deliver the messages or appointments you request. External AI recipients and permission are described separately below.

We do not sell personal information. We may disclose information when required by law, to protect users or the service, or as part of a business transfer subject to appropriate safeguards.

Coaches and administrators do not receive direct access to vMind journals, typing summaries, private check-ins, or safety plans. If you choose coach sharing, the coach queue receives only the one-time or weekly redacted summary and fields you selected. Queue access is audited and is not an emergency or continuously monitored service.

On eligible public pages, you can choose whether Google Analytics and Meta Pixel may measure page visits and advertising performance. Optional tracking does not load until you select “Allow optional tracking.” Rejecting it does not prevent you from using the website.

Native iOS and Android apps offer the same optional public-screen and shopping measurement through Meta App Events. iOS advertising measurement also follows the device tracking permission.

For signed-in private screens, we keep first-party daily usage totals by broad screen category and platform. These counters contain no account identifiers, device identifiers, IP addresses, full URLs, health answers, scores, or message content. They are counts of visits, not profiles or unique-user tracking.

Optional analytics and advertising pixels remain disabled on private account pages, VScore, support, authentication and other health-sensitive routes. We do not send VScore answers, scores, health details, support messages or contact details in growth analytics events. A browser Global Privacy Control or Do Not Track signal is treated as a rejection of optional tracking.

You can reopen “Privacy choices” on an eligible public page to change your saved browser choice.

With your separate permission, assistant messages, selected daily tracking (water and meal or movement completion), and relevant wellness preferences may be sent to OpenAI, through OpenRouter to its DeepSeek model provider, or through Requesty to its NVIDIA model provider, to generate assistant responses and custom VFit items. A provider fallback can send the same permitted input to another disclosed recipient. VScore calculation is deterministic and does not need external AI permission.

Names, email addresses and account identifiers are not included automatically in the assistant’s AI context. Do not type identifying or confidential information into assistant requests. Private vMind journals and safety plans are never used as AI input. We record the disclosure version, permission choice, permitted recipients and time. AI providers process requests under their own contracts and safeguards; do not assume provider processing is the same as storage within VBowls.

Use Privacy & agreements to allow or withdraw external AI permission. Refusal does not prevent standard account use, VScore or deterministic tracking. Withdrawal stops future AI requests; it cannot recall data already processed by a provider. For access or deletion questions concerning previous processing, contact us.

Community submissions and photos are processed for review before publication. Moderators can access pending content and abuse reports. Approved public content may be viewed and shared outside your account. Community-only content is limited to eligible viewers within the service. Privacy & agreements stores your versioned agreement to the Community Rules. Report, block and removal controls remain available if you stop participating.

When configured, sanitized native app error reporting to Sentry requires your separate diagnostics permission. Reports exclude account identity, health values, messages and private journal text. App version and code stack locations help diagnose failures. Automatic session tracking and native crash collection are disabled. Withdraw diagnostics permission in Privacy & agreements; standard features work without it.

We do not place journal text or structured mood data in URLs, application logs, error messages, advertising profiles, or AI prompts. Third-party advertising pixels, retargeting, session replay, and third-party product analytics are disabled on vMind and Support Now surfaces. Only the anonymous first-party category counts described above are collected.

Generic reminder notifications do not mention mood, distress, routine changes, or journal activity. Journal entries are not monitored, and vMind cannot contact emergency help for you.

We retain account and transaction records for as long as needed to provide the service and meet legal, tax, fraud-prevention, and dispute obligations. Connected daily health aggregates are retained for up to 24 months unless you delete them sooner. Some financial and security records may be retained after account closure where required.

• vMind journals and safety plans remain until you delete them.
• vMind check-ins, typing summaries, routine signals, and tool sessions are retained for up to 24 months.
• Redacted shared summaries are retained for up to 12 months, and reminder-delivery records for up to 90 days.

You can privately export or delete all vMind data from the hub. Deletion covers private records, consent settings, shared copies, and scheduled reminders. You can also export or delete connected health data from your account. For complete access, correction, portability, objection, or deletion requests, contact us using the address below.

Request deletion within Account & purchases or through our external account deletion page. Account deletion removes associated private records and media after processing, subject to disclosed legal retention and unresolved transactions. Apple and Google subscriptions must be cancelled separately in the relevant store. Contact us if a request cannot be completed.

We use access controls, encryption in transit, row-level database policies, audit records, and restricted server credentials. No system is completely secure. Providers may process information outside your country under their contractual and legal safeguards.

VFit, VScore, and account services are intended for people aged 18 or older. Products for children must be selected and purchased by a parent or legal guardian. Contact us if you believe a child provided personal information without appropriate consent.

Email contact@vbowls.com with privacy requests or complaints. We may verify your identity before fulfilling a request.